Is the IPv4 address inside 100.64.0.0/10 (RFC 6598 carrier-grade NAT)? Pure bit-mask check, no network call, returning inside true/false with the range's first/last address and size. Precise allow/deny rules for a well-known block. $0.01 per check.